Cybersecurity Starts in the Boardroom
The threat actors will go after anyone who they can exploit, steal credentials from, or who has something the criminal wants! In this case it is workers for the forthcoming US elections. This one is targetting people in a privileged position: US election workers hit with phishing, malware emails • …
Continue reading “Who are the targets for phishing campaigns?”
Recently I have covered a couple of incidents that revolve around a betrayal of trust – often called the insider threat: The Insider Threat – it may be at the top of the company… – Smart Thinking Solutions The Insider Threat and $250,000 – Smart Thinking Solutions This got me …
Continue reading “A series on the Insider Threat – and your first tip on dealing with it!”
Because for the effort the threat actors put in, the returns can be very high, so it is worth their while sending out billions of malicious messages to see who they can catch. It could be you… Now in the age of online “as-s-service” software, it has become even easier …
Continue reading “Why do I write so much about Social Engineering and Phishing Attacks?”
It is actually a serious cyber security incident, with many questions for Toyota to answer. An outsourced developer left crucial security information, that could have exposed hundreds of thousands of customer records on a public facing repo on GitHub. This was done in 2017 and only discovered in September 2022, …
Continue reading “Supply Chain slip up… Something like this could easily happen to you…”
Intel has confirmed that the leaked BIOS code on GitHub is the code for the UEFI BIOS of Alder Lake CPUs. Intel confirms leaked Alder Lake BIOS Source Code is authentic (bleepingcomputer.com) Intel has been talking down the security implications of the leak, however the release of the code will …
Another report of Android malware getting into the play store: Fake antivirus, Sharkbot circles back onto Google Play store | NCC Group Newsroom (mynewsdesk.com) Do you have a position on Android devices and their use by your team when they are processing your information on them? You should have! Yesterday’s …
I wonder, is ransomware or Android malware the most prolific attack vector? I am constantly reporting on both – so I hope you have all taken steps to defend against both. New Android malware ‘RatMilad’ can steal your data, record audio (bleepingcomputer.com) Cheerscrypt ransomware linked to a Chinese hacking group …
